A significant concern to network security should be the fact that CP signalling misuse can be deployed in a wide range of tactical steps.
We identify the potential for an adversary to gain initial access through the exploitation of the remote service offered for network MANO.
Considering this as the first step in an attack, there arises the possibility of misusing the service to make configuration changes to the 5GCN [1]}.
Potential changes to the configuration can lead to changes in SDN flow tables, network configuration to impair defences or result in network boundary bridging.
A more general purpose of this type of technique may be to introduce network configurations that can be exploited for lateral movement purposes whilst disguising configuration changes as intentional.
